weak-signal-synthesizer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to monitor and synthesize information from external, untrusted sources such as niche Reddit communities, GitHub trending projects, and academic preprints. This creates a vulnerability where an attacker could embed malicious instructions in those public sources to influence the agent's behavior.
- Ingestion points: Instructions in SKILL.md direct the agent to fetch data from various public web sources.
- Boundary markers: The skill lacks delimiters or specific instructions to help the agent distinguish between data to be analyzed and instructions to be followed.
- Capability inventory: No custom scripts or tools are provided; the skill relies on the agent's default capabilities.
- Sanitization: No sanitization, filtering, or validation steps are defined for the ingested content.
- [NO_CODE]: The skill is comprised entirely of a markdown instruction file and does not include any executable code, scripts, or package dependencies.
Audit Metadata